Solo: Add udev rules to Linux distributions

[nickray]

It's too much effort for normal people to install udev rules.
On Debian [1], 70-u2f.rules is packaged with libu2f-host, which is maintained by Yubico.

For Fedora, according to [1], an alternative is used: https://github.com/amluto/u2f-hidraw-policy which checks if 0xf1d0 is in the hidraw usage page.

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=824532

[nickray]

https://github.com/systemd/systemd/issues/11996

[Square252]

I created PKGBUILDs for ArchLinux (they are available in the AUR), to provide Solo's udev files directly instead of the one provided via libu2f-host:

• https://aur.archlinux.org/packages/solokeys-udev-git/
• https://aur.archlinux.org/packages/solokeys-udev/

[emaste]

For reference the most recent version of FreeBSD's https://www.freshports.org/security/u2f-devd includes SoloKeys entries

        match "vendor"          "0x0483";
        match "product"         "(0xcdab|0xa2ca)";
...
        match "vendor"          "0x1209";
        match "product"         "(0x5070|0x50b0)";

[nickray]

Yeah, libu2f-host cut a release, Arch Linux has us now too @Square252. Hopefully this will roll out to non-stable Debian + Ubuntu soon! @emaste do you happen to know if u2f.conf.sample is the upstream of u2f-devd, or how does this work? In any case, happy about the magic <3

[nickray]

https://tracker.debian.org/pkg/libu2f-host

[Forage]

FYI: Ubuntu 19.10 has libu2f-udev 1.1.10-1 installed by default now which includes rules for Solo

[poettering]

Note that since systemd 244 udev detects fido2 keys automatically and sets the right perms. Any additional udev rules should be unnecessary, in particular any that use vid/pid matching.

[jolo1581]

@poettering since not everyone has systemd >= 244 the udev rules might be necessary

[poettering]

My comment was mostly a suggestion to add this to the docs (in particular packaging/building docs), so that people who prepare any of this for distros just skip the rules if their distro has a new systemd.

[jolo1581]

@poettering
Maybe you can send a pullrequest

[fmeum]

@jolo1581 @poettering I added a note about the systemd support in #435.

[bjacquin]

@poettering since not everyone has systemd >= 244 the udev rules might be necessary

not everyone has systemd overall